monkeypatch lesserphp

This applies https://github.com/MarcusSchwarz/lesserphp/pull/19 manually
to the vendor directory.

It seems lesserphp is abandoned and we will need to find a proper
solution. P

monkeypatch lesserphp

This applies https://github.com/MarcusSchwarz/lesserphp/pull/19 manually
to the vendor directory.

It seems lesserphp is abandoned and we will need to find a proper
solution. Probably by maintaining our own fork. For now this should fix
PHP 7.4 tests.

show more ...

Allow revert action for logged in users only

This should prevent accidental reverts by bots on open wikis

SVG based smileys

This patch replaces our old gif based smileys by SVG based ones from the
Twemoji project. This allows for scaling the emojis with the text
they're used in.

work around disabled php_strip_whitespace. fixes #3271

scrutinizer fix

Media CSP: omit script-src and add frame-ancestors

See comments for details:

https://github.com/splitbrain/dokuwiki/pull/3310#discussion_r506909727
https://github.com/splitbrain/dokuwiki/pull/3310#

Media CSP: omit script-src and add frame-ancestors

See comments for details:

https://github.com/splitbrain/dokuwiki/pull/3310#discussion_r506909727
https://github.com/splitbrain/dokuwiki/pull/3310#discussion_r506913304

show more ...

mime.conf: add SVG image mime type

This allows uploading and serving SVG images.

translation update

update wiki:syntax with usage doc

translation update

translation update

Fix groups match in auth_ismanager and auth_isadmin

Even if a user was passed to the check but no groups, current user's groups were used for the match

Remove strings and files not yet translated

Add IPv6 unit tests

Minor optimization of clientIP()

Remove unnecessary assignment, check the output of filter_var() directly.

Initial batch of Minnan localization

translation update

translation update

added JavaScript based filter mechanism

Restrictive Content-Security-Policy for media #1045

This adds a CSP header for all media delivered through our fetch.php
dispatcher. This should revent any scripts etc. to be executed when
scriptabl

Restrictive Content-Security-Policy for media #1045

This adds a CSP header for all media delivered through our fetch.php
dispatcher. This should revent any scripts etc. to be executed when
scriptable media, like SVG is used.

Suggestions on finetuning the policy are welcome.

The policy is added to the MEDIA_SENDFILE event, so plugins can easily
influence it. The way it is passed as an array should make it easier to
modify from plugins as well.

I put the mechanism to send the header into it's own class in the HTTP
namespace. Additional methods from inc/httputils could be moved here
later. The method might also be interesting for #2198 and #1676.

show more ...

fix: mark inputs of styling plugin as required

While this cannot ensure that the value is valid, it should prevent
accidental saving of an empty field, which crashes the less compiler.

Fixes #2246

replace deprecated function calls #3266

upgraded php-archive to 1.2.0 #3298

fixes an incompatibility with PHP 8

Fix proper param order and use main function name instead of alias 'join'.

Fixing of cell width